CVE-2011-0167

The windows functionality in WebKit in Apple Safari before 5.0.4 allows remote attackers to bypass the Same Origin Policy, and force the upload of arbitrary local files from a client computer, via a crafted web site.
Severity
UNKNOWN
AV:N/AC:M/Au:N/C:N/I:P/A:N
Atk. Vector
NETWORK
Atk. Complexity
MEDIUM
Base Score
CVSS 3.x
EPSS Score
Percentile: 76%
VendorProductVersion
applesafari
𝑥
≤ 5.0.3
applesafari
1.0
applesafari
1.0
applesafari
1.0
applesafari
1.0.0
applesafari
1.0.0b1
applesafari
1.0.0b2
applesafari
1.0.1
applesafari
1.0.2
applesafari
1.0.3
applesafari
1.0.3
applesafari
1.0.3
applesafari
1.1
applesafari
1.1.0
applesafari
1.1.1
applesafari
1.2
applesafari
1.2.0
applesafari
1.2.1
applesafari
1.2.2
applesafari
1.2.3
applesafari
1.2.4
applesafari
1.2.5
applesafari
1.3
applesafari
1.3.0
applesafari
1.3.1
applesafari
1.3.2
applesafari
1.3.2
applesafari
1.3.2
applesafari
2.0
applesafari
2.0.0
applesafari
2.0.1
applesafari
2.0.2
applesafari
2.0.3
applesafari
2.0.3
applesafari
2.0.3
applesafari
2.0.3
applesafari
2.0.3
applesafari
2.0.4
applesafari
3.0
applesafari
3.0.0
applesafari
3.0.0b
applesafari
3.0.1
applesafari
3.0.1b
applesafari
3.0.2
applesafari
3.0.2b
applesafari
3.0.3
applesafari
3.0.3b
applesafari
3.0.4
applesafari
3.0.4b
applesafari
3.1.0
applesafari
3.1.0b
applesafari
3.1.1
applesafari
3.1.2
applesafari
3.2.0
applesafari
3.2.1
applesafari
3.2.2
applesafari
4.1
applesafari
4.1.1
applesafari
4.1.2
applesafari
5.0
applesafari
5.0.1
applesafari
5.0.2
applewebkit
*
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html
http://support.apple.com/kb/HT4566
http://www.securityfocus.com/bid/46816
http://www.securitytracker.com/id?1025183